This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft File: F03C1838587677BF6505C46715F42F8B8416F949.mft (raw, json) Hash identifier: 6q9D6DMMI3gECqG7RL81pPgVNGiyjJbNOgGkhVkbMo4= Subject key identifier: 85:B1:66:17:10:E3:8E:1C:AF:1F:32:CB:24:7C:6B:B2:4F:21:01:75 Authority key identifier: F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 Certificate issuer: /CN=F03C1838587677BF6505C46715F42F8B8416F949 Certificate serial: 646462A6A80B3AE018CFC9D4C5EF905570E14B52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft Manifest number: 0205 Signing time: Tue 23 Dec 2025 10:12:57 +0000 Manifest this update: Tue 23 Dec 2025 10:07:57 +0000 Manifest next update: Fri 26 Dec 2025 18:29:57 +0000 Files and hashes: 1: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: 5d7eyl15yI3SPHjS9CWQbB/B/JL+7bbkCavXXd21rTk=) 2: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: o1axn6FylL5HDL/+cmxNZgdh+qBhrW0MUa5ofe3vKgY=) 3: F03C1838587677BF6505C46715F42F8B8416F949.crl (hash: YkQFq4/SyjgNVTIuyCvAJf67s/RQcrX12ipaMgzXyHQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 18:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:64:62:a6:a8:0b:3a:e0:18:cf:c9:d4:c5:ef:90:55:70:e1:4b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03C1838587677BF6505C46715F42F8B8416F949 Validity Not Before: Dec 23 10:07:57 2025 GMT Not After : Dec 26 18:29:57 2025 GMT Subject: CN=85B1661710E38E1CAF1F32CB247C6BB24F210175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:89:62:4f:f9:cb:00:e9:99:63:51:e5:14:59: cf:80:93:b0:c0:3a:ea:64:bd:1e:16:63:a4:da:d6: a6:fa:1f:82:05:c4:9f:56:f1:6b:1f:6b:bb:94:f2: f5:bd:18:7c:07:ee:9d:86:73:80:a3:a1:e6:a6:97: 72:6b:1a:aa:c7:ff:4d:37:c6:f2:c7:b0:4d:45:7f: b7:39:08:de:c1:ce:99:33:ef:70:d4:5b:b1:40:17: e2:f1:85:f7:9b:e7:6c:ec:29:41:a6:85:6f:3a:a0: d2:22:da:a3:19:34:0d:8e:54:cd:de:07:e9:60:ca: f2:36:63:b7:58:b9:e0:db:00:6f:ca:38:22:95:35: b2:7f:33:a0:32:cb:b9:e7:e7:0f:a4:39:29:17:a5: 82:cc:a2:7c:a6:46:2d:57:aa:92:65:f6:68:03:b3: 2f:e1:d1:48:8f:0d:d7:26:3d:3c:84:59:71:61:82: dd:c3:7a:fb:28:9f:b9:ea:74:19:29:f2:61:39:e6: 0e:22:a9:b2:8c:d8:26:ed:82:d9:f1:1b:58:94:52: 00:ce:6c:03:2d:81:25:37:27:85:c5:9a:49:32:e7: 4b:f8:85:9c:1e:c3:4e:e3:d1:c3:da:c7:dd:b9:5a: df:98:f6:fb:ed:45:87:57:72:b7:50:78:d6:b4:2b: 10:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B1:66:17:10:E3:8E:1C:AF:1F:32:CB:24:7C:6B:B2:4F:21:01:75 X509v3 Authority Key Identifier: keyid:F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ad:2f:11:bc:34:ed:37:ad:51:f9:c1:54:d0:33:26:93:5c: bb:54:75:d6:d1:8c:a4:c0:df:d4:04:91:a3:c0:93:cb:39:f7: 1b:0f:02:09:f7:dc:53:ef:32:ef:35:4b:cf:d0:66:11:c0:36: 8e:c3:96:7b:94:8b:af:12:6a:be:46:e5:61:88:fa:fb:34:f1: 25:13:a9:83:a8:18:d1:f4:d3:c8:6a:a9:72:59:ab:c1:4d:b9: 05:8d:e7:7e:ed:07:46:72:da:a6:0e:a2:ac:0f:15:c2:9f:22: 64:79:9f:d2:a6:6a:14:72:ae:cb:75:a5:45:89:14:43:0a:8a: a6:3f:36:0d:12:26:ff:62:fa:01:37:96:6f:24:92:bf:6d:9d: 26:94:e7:c8:20:9e:eb:c1:19:43:39:a3:54:29:06:5d:81:c9: 1b:5e:99:a9:87:96:c8:f2:67:de:9d:6b:81:4e:63:6c:67:28: de:f6:15:85:98:c4:4d:ef:5c:1c:e5:97:08:63:a8:b2:ee:ee: 64:04:e1:cd:34:e4:ab:52:29:69:63:9c:b4:5a:ea:30:d8:48: aa:7e:71:ce:7c:33:6e:99:ae:cf:f2:de:65:3b:06:f2:c2:2f: e1:90:f9:3d:86:53:3a:71:b4:43:a1:33:5c:a9:12:a6:3f:3e: 59:bb:6d:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZGRipqgLOuAYz8nUxe+QVXDhS1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4 NDE2Rjk0OTAeFw0yNTEyMjMxMDA3NTdaFw0yNTEyMjYxODI5NTdaMDMxMTAvBgNV BAMTKDg1QjE2NjE3MTBFMzhFMUNBRjFGMzJDQjI0N0M2QkIyNEYyMTAxNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeiWJP+csA6ZljUeUUWc+Ak7DA OupkvR4WY6Ta1qb6H4IFxJ9W8Wsfa7uU8vW9GHwH7p2Gc4Cjoeaml3JrGqrH/003 xvLHsE1Ff7c5CN7Bzpkz73DUW7FAF+Lxhfeb52zsKUGmhW86oNIi2qMZNA2OVM3e B+lgyvI2Y7dYueDbAG/KOCKVNbJ/M6Ayy7nn5w+kOSkXpYLMonymRi1XqpJl9mgD sy/h0UiPDdcmPTyEWXFhgt3Devson7nqdBkp8mE55g4iqbKM2CbtgtnxG1iUUgDO bAMtgSU3J4XFmkky50v4hZwew07j0cPax925Wt+Y9vvtRYdXcrdQeNa0KxAdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhbFmFxDjjhyvHzLLJHxrsk8hAXUwHwYDVR0j BBgwFoAU8DwYOFh2d79lBcRnFfQvi4QW+UkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmQzZGQ3OS04NjM1LTQ4NTctOGEzYy05ODU5NTQ1MTZmOWUvMC9GMDNDMTgzODU4 NzY3N0JGNjUwNUM0NjcxNUY0MkY4Qjg0MTZGOTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4NDE2 Rjk0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkM2RkNzktODYzNS00ODU3LThh M2MtOTg1OTU0NTE2ZjllLzAvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJG OEI4NDE2Rjk0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2tLxG8NO03rVH5wVTQMyaTXLtUddbRjKTA 39QEkaPAk8s59xsPAgn33FPvMu81S8/QZhHANo7DlnuUi68Sar5G5WGI+vs08SUT qYOoGNH008hqqXJZq8FNuQWN537tB0Zy2qYOoqwPFcKfImR5n9KmahRyrst1pUWJ FEMKiqY/Ng0SJv9i+gE3lm8kkr9tnSaU58ggnuvBGUM5o1QpBl2ByRtemamHlsjy Z96da4FOY2xnKN72FYWYxE3vXBzllwhjqLLu7mQE4c005KtSKWljnLRa6jDYSKp+ cc58M26Zrs/y3mU7BvLCL+GQ+T2GUzpxtEOhM1ypEqY/Plm7bZw= -----END CERTIFICATE-----Generated at Wed Dec 24 22:07:54 2025 by rpki-client